Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/426b9d-0e61-4fad-98f3-a0c5970a6f76/1/fPtFMoAfpWmiRJexsTJp_98hkwg.roa
File: fPtFMoAfpWmiRJexsTJp_98hkwg.roa (raw, json)
Hash identifier: EHvtCQakXIZ6axL8EnhhJEfR4nibsmCWYqUcPM/BupU=
Subject key identifier: 7C:FB:45:32:80:1F:A5:69:A2:44:97:B1:B1:32:69:FF:DF:21:93:08
Certificate issuer: /CN=7a8a1e836fa921d29af89c4a6ed6a0450003933c
Certificate serial: 180ACE5A
Authority key identifier: 7A:8A:1E:83:6F:A9:21:D2:9A:F8:9C:4A:6E:D6:A0:45:00:03:93:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eooeg2-pIdKa-JxKbtagRQADkzw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/426b9d-0e61-4fad-98f3-a0c5970a6f76/1/fPtFMoAfpWmiRJexsTJp_98hkwg.roa
Signing time: Sat 01 Jan 2022 15:06:04 +0000
ROA not before: Sat 01 Jan 2022 15:06:04 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 199284
IP address blocks: 5.102.160.0/21 maxlen: 24
185.97.180.0/22 maxlen: 24
178.19.224.0/20 maxlen: 24
2a01:75c0::/29 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 403361370 (0x180ace5a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a8a1e836fa921d29af89c4a6ed6a0450003933c
Validity
Not Before: Jan 1 15:06:04 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7cfb4532801fa569a24497b1b13269ffdf219308
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:8f:d4:55:b5:b1:b6:ba:6f:5d:ec:21:fa:3a:
20:20:a9:8e:50:21:ac:3e:e6:0d:d4:3d:d6:cb:be:
be:ba:fa:f1:3b:3c:85:fd:38:d1:ae:ae:01:48:5e:
4c:d0:56:47:91:a8:b0:38:7b:ba:52:a8:4e:9f:3b:
21:8a:b9:22:82:e0:c5:49:7d:f6:ef:96:be:03:47:
72:f1:27:b2:f4:8c:43:2e:b2:2d:02:69:2a:93:25:
e6:1e:60:59:c1:b5:9f:42:bd:ed:f9:0c:26:65:d8:
a3:4e:f0:d9:ad:3d:a9:a9:11:b2:c4:ce:ea:dd:6d:
40:46:8b:d1:51:1d:bd:f3:9a:b8:c8:5d:ea:c9:35:
b8:f5:8b:cd:13:23:db:09:58:c1:c4:7c:d8:c6:ca:
56:90:70:f5:ad:14:e8:8a:5c:19:90:ad:62:c8:cd:
e4:38:6d:35:20:64:3e:fb:5d:b0:25:73:0b:8b:b3:
82:73:2e:1d:72:52:af:22:90:e8:f6:36:a6:9f:03:
c2:5d:df:70:8c:43:8c:7c:34:23:f8:17:53:73:09:
31:10:f4:10:db:cd:5e:2d:72:25:22:34:e9:f8:c5:
75:69:83:a4:45:87:42:30:92:14:ce:27:82:26:12:
9e:cb:a4:84:d7:56:83:35:98:e7:1e:34:47:53:f9:
08:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:FB:45:32:80:1F:A5:69:A2:44:97:B1:B1:32:69:FF:DF:21:93:08
X509v3 Authority Key Identifier:
keyid:7A:8A:1E:83:6F:A9:21:D2:9A:F8:9C:4A:6E:D6:A0:45:00:03:93:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eooeg2-pIdKa-JxKbtagRQADkzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/426b9d-0e61-4fad-98f3-a0c5970a6f76/1/fPtFMoAfpWmiRJexsTJp_98hkwg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/426b9d-0e61-4fad-98f3-a0c5970a6f76/1/eooeg2-pIdKa-JxKbtagRQADkzw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.102.160.0/21
178.19.224.0/20
185.97.180.0/22
IPv6:
2a01:75c0::/29
Signature Algorithm: sha256WithRSAEncryption
8d:01:98:de:c3:1f:27:c8:7b:10:8e:9b:f3:c9:81:3b:29:67:
48:b3:cf:49:c7:40:d6:c7:d7:89:3d:db:ff:2d:42:38:f5:3c:
f6:86:96:6a:ad:e0:61:21:54:15:8d:30:3a:22:09:fa:64:08:
84:e3:2c:63:64:ad:b1:6b:18:4f:61:e0:2d:b2:a7:98:e2:b5:
f3:11:e6:f8:01:eb:d0:00:93:57:de:8f:9b:61:92:ef:b6:13:
f9:e2:bd:73:58:14:b4:f4:7f:c0:a6:39:9d:ea:99:ab:89:49:
2e:f3:0b:ec:90:1d:89:47:54:48:cc:25:0f:b3:4c:bf:ea:02:
1e:6a:72:19:3e:36:0f:b0:94:f3:d9:91:42:b8:2d:b8:47:04:
a0:e2:e3:41:91:b0:ed:1d:f0:78:02:08:85:24:73:ea:ef:e3:
eb:48:cd:87:22:9f:64:27:96:f9:67:d7:86:33:b8:cd:c8:c8:
5e:20:10:e4:c6:e9:f7:5e:5c:30:86:ea:be:20:a5:24:2f:d2:
2c:49:cf:4a:4b:51:98:f1:00:b6:02:90:e2:f0:85:ab:fb:53:
bc:7f:40:53:21:e5:ec:63:0b:ba:41:5e:a4:f5:16:45:d7:a1:
3a:8a:9f:65:a5:98:fb:42:d6:ed:fe:1a:2c:db:f2:d5:7c:8e:
a5:7d:ae:1b
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgIEGArOWjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg3
YThhMWU4MzZmYTkyMWQyOWFmODljNGE2ZWQ2YTA0NTAwMDM5MzNjMB4XDTIyMDEw
MTE1MDYwNFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoN2NmYjQ1MzI4MDFm
YTU2OWEyNDQ5N2IxYjEzMjY5ZmZkZjIxOTMwODCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMCP1FW1sba6b13sIfo6ICCpjlAhrD7mDdQ91su+vrr68Ts8
hf040a6uAUheTNBWR5GosDh7ulKoTp87IYq5IoLgxUl99u+WvgNHcvEnsvSMQy6y
LQJpKpMl5h5gWcG1n0K97fkMJmXYo07w2a09qakRssTO6t1tQEaL0VEdvfOauMhd
6sk1uPWLzRMj2wlYwcR82MbKVpBw9a0U6IpcGZCtYsjN5DhtNSBkPvtdsCVzC4uz
gnMuHXJSryKQ6PY2pp8Dwl3fcIxDjHw0I/gXU3MJMRD0ENvNXi1yJSI06fjFdWmD
pEWHQjCSFM4ngiYSnsukhNdWgzWY5x40R1P5CGECAwEAAaOCAiQwggIgMB0GA1Ud
DgQWBBR8+0UygB+laaJEl7GxMmn/3yGTCDAfBgNVHSMEGDAWgBR6ih6Db6kh0pr4
nEpu1qBFAAOTPDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2Vvb2VnMi1wSWRLYS1KeEtidGFnUlFBRGt6dy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYWYvNDI2YjlkLTBlNjEtNGZhZC05OGYzLWEwYzU5NzBhNmY3Ni8x
L2ZQdEZNb0FmcFdtaVJKZXhzVEpwXzk4aGt3Zy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYWYv
NDI2YjlkLTBlNjEtNGZhZC05OGYzLWEwYzU5NzBhNmY3Ni8xL2Vvb2VnMi1wSWRL
YS1KeEtidGFnUlFBRGt6dy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA6
BggrBgEFBQcBBwEB/wQrMCkwGAQCAAEwEgMEAwVmoAMEBLIT4AMEArlhtDANBAIA
AjAHAwUDKgF1wDANBgkqhkiG9w0BAQsFAAOCAQEAjQGY3sMfJ8h7EI6b88mBOyln
SLPPScdA1sfXiT3b/y1COPU89oaWaq3gYSFUFY0wOiIJ+mQIhOMsY2StsWsYT2Hg
LbKnmOK18xHm+AHr0ACTV96Pm2GS77YT+eK9c1gUtPR/wKY5neqZq4lJLvML7JAd
iUdUSMwlD7NMv+oCHmpyGT42D7CU89mRQrgtuEcEoOLjQZGw7R3weAIIhSRz6u/j
60jNhyKfZCeW+WfXhjO4zcjIXiAQ5Mbp915cMIbqviClJC/SLEnPSktRmPEAtgKQ
4vCFq/tTvH9AUyHl7GMLukFepPUWRdehOoqfZaWY+0LW7f4aLNvy1XyOpX2uGw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:38:29 2024 by rpki-client on console-ams.rpki-client.org